CVE-2024-45383CWE-664

A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636…

Medium · published September 12, 2024

CVSS v3.1
5.0
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01545 · 74.8th percentile
Weakness
CWE-664 · Improper Control of a Resource Through its Lifetime
Published
2024-09-12T18:19Z
EPSS history
Timeline
  • 12 SEP 18:19Z
    A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636…
    cvelistv5